VPN Server under Static NAT. Any advices?

[handshake78]

Hi there,

Is it possible to setup a VPN server in DMZ under a static NAT translation? I have 2911 as an edge router, another 2951 as a firewall with four zones - inside1, inside2, outside, dmz. All IP addressing between edge and firewall is private. The web and mail servers are working in DMZ under static NAT. The question is - can I also setup VPN server in DMZ under the static NAT? The clients establishing VPN tunnels will work with DMZ servers (other servers) only. Thanks!

[fb_webuser]

We featured your question on the Cisco Support Community Facebook page. Check out some of the responses here: http://www.facebook.com/CiscoSupportCommunity/posts/269198139851698

---

Posted by WebUser Cisco NetPro from Cisco Support Community App

[Karsten Iwen · Accepted solution]

Yes, that can be done. For IPSec-VPNs, just make sure that NAT-Traversal is not disabled.

Sent from Cisco Technical Support iPad App

[handshake78]

Thanks a lot for the answers!